Description
Sophos AP6 420 Access Point (US) with Support, 1 year subscription
The Sophos AP6 420 is an indoor Wi-Fi 6 access point (2x2, dual radio, 2.4 and 5 GHz), managed from Sophos Fusion with your Sophos switches and firewall. This listing is the US version with Support and Services for 1 year, Sophos part number AP42UZ12ZZPCNP.
- Part numberAP42UZ12ZZPCNP
- Wi-FiWi-Fi 6, 2x2
- Ethernet1 x 1 GbE
- Power802.3at (PoE+)
- Support1 year included
Who it is for
Small office, shop or clinic
Wi-Fi 6 for a low to medium number of users. Sophos positions it as the general-purpose entry point to the AP6 range.
Easy to place
Mounts on a desk, wall or ceiling with the included bracket, powered over one network cable.
Managed with the rest of your Sophos estate
Run it in Sophos Fusion with your Sophos switches and firewall. Active Threat Response can isolate a compromised device across switches and access points.
What is included
- The Sophos AP6 420 access point, US version, with a limited lifetime warranty (lifetime ends at the Sophos End-of-Life date for the model).
- Mounting: desktop, wall or ceiling (bracket included).
- No power adapter or PoE injector in the box. Power it from a 802.3at (PoE+) switch port or injector. A 12V DC supply is available separately.
- Sophos Fusion management: Sophos requires an active Support and Services subscription to manage AP6 access points in Sophos Fusion. Local management of a single access point does not need one.
- Firmware updates for 1 year.
- Advance hardware replacement (advanced RMA) under the Sophos hardware replacement policy.
- 24/7 phone support from Sophos.
Power check: plan 17.5W of 802.3at PoE+ per AP6 420 at the switch. Any Sophos PoE switch supplies it, for example the Sophos CS110-24FP (410W budget).
Specifications
| Model | Sophos AP6 420 (Indoor) |
|---|---|
| Wi-Fi standard | Wi-Fi 6 (802.11ax) |
| Bands | 2.4 and 5 GHz |
| Radios | 2x2, dual radio |
| Maximum data rate | 2,875 Mbps combined; 575 Mbps (2.4 GHz), 2,300 Mbps (5 GHz) |
| Antennas | Internal omni |
| Ethernet | 1 x 1 GbE (PoE in) |
| Power | 802.3at (PoE+); plan 17.5W of PoE per access point at the switch |
| Other power | Can also run from a 12V DC power supply, sold separately as a Sophos accessory |
| SSIDs | 16 (8 per radio) |
| Mounting | Desktop, wall or ceiling (bracket included) |
| Operating temperature | 0 to 40°C |
| Size and weight | 183 x 183 x 35 mm, 0.7 kg |
| Management | Sophos Fusion (formerly Sophos Central), or the local web interface for a single access point. Not managed from Sophos Firewall. |
| Warranty | Limited lifetime, ends at the Sophos End-of-Life date |
Compare Sophos AP6 access points
All AP6 models are managed the same way. The differences are Wi-Fi 6 or 6E, the number of radio streams, port speed and the PoE they need.
| Model | Wi-Fi | Radios | Ethernet | PoE needed | Best for |
|---|---|---|---|---|---|
| AP6 420 (this model) | Wi-Fi 6, 2.4 and 5 GHz | 2x2, dual radio | 1 x 1 GbE | 802.3at (PoE+) | General purpose, low to medium density |
| AP6 420E | Wi-Fi 6E, 2.4, 5 and 6 GHz | 2x2, tri-radio | 1 x 2.5 GbE | 802.3at (PoE+) | General purpose, medium density |
| AP6 840 | Wi-Fi 6, 2.4 and 5 GHz | 4x4, dual radio | 1 x 2.5 GbE | 802.3at (PoE+) | High-end, medium to high density |
| AP6 840E | Wi-Fi 6E, 2.4, 5 and 6 GHz | 4x4, tri-radio | 2 x 2.5 GbE | 802.3bt (PoE++) | High-end, medium to large environments |
| AP6 420X | Wi-Fi 6, 2.4 and 5 GHz | 2x2, dual radio | 1 x 2.5 GbE | 802.3at (PoE+) | Outdoor and exposed areas, low to medium density (outdoor) |
Upgrade path
- Sophos AP6 420 (this listing). Wi-Fi 6, 2x2, dual radio.
- Sophos AP6 420E. The next step up: adds the 6 GHz band (Wi-Fi 6E) and a 2.5 GbE port for less crowded, faster Wi-Fi.
- Sophos AP6 840. The next step up: 4x4 radios and a 2.5 GbE port for busier offices, classrooms and meeting areas.
- Sophos switches. PoE switches managed in the same Sophos Fusion console.
- Sophos Firewall. Adds more automatic response actions to Active Threat Response.
All options for the Sophos AP6 420
| Version | Access point only | With 1 year support | With 3 years support | With 5 years support |
|---|---|---|---|---|
| Canada version | - | View | View | View |
| US version | - | This listing | View | View |
| Several access points or other terms | Ask Nuformat for a quote: support-only terms, mixed models or a site survey | |||
Frequently asked questions
What happens when the included support ends?
Renew support to keep managing the access point in Sophos Fusion, with firmware updates, advance replacement and 24/7 phone support. Ask us for a renewal quote before the 1 year term ends.
Can I manage it from my Sophos Firewall?
No. Sophos says AP6 Series access points cannot be managed from any Sophos firewall. They are managed in Sophos Fusion, or one at a time through the local web interface.
What powers it?
802.3at (PoE+) from a switch or injector; Sophos lists 17.5W at the switch. No power adapter or PoE injector is in the box. The AP6 420 can also use a 12V DC supply, sold separately.
Canada or US version?
Sophos sells regional versions of each access point. This listing is the US version. Order the version for the country where the access point will be installed.
How many access points do I need?
It depends on floor area, walls and how many devices connect at once. Send us a floor plan and user count and we will suggest a number and placement.
Plan your Wi-Fi with Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Send us your floor plan, user count and current switches, and we will confirm the models, quantities, PoE and support terms.
Request a quoteSpecifications from the Sophos AP6 Series tech specs and operating instructions; support requirement from Sophos partner news on Switch and AP6 support enforcement; warranty from the Sophos hardware replacement policy, checked October 11, 2026. Pricing and availability confirmed by Nuformat at quotation. All Sophos access points · Sophos switches

